Microsoft breaks Patch Tuesday record with fixes for over 200 security flaws

Date:
Wed, 10 Jun 2026 11:35:00 +0000

Description:
AI use is really starting to show and for once, we're happy for it.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter June 2026 Patch Tuesday release fixes nearly 200 Windows vulnerabilities, Microsofts largest release to date It includes Chaotic Eclipses GreenPlasma (CVE202645586) and YellowKey (CVE202645585), disclosed without coordination AIdriven bug discovery fueling recordhigh patch volumes, expected to continue growing The June 2026 Patch Tuesday cumulative update for Microsoft s Windows operating system has been released - and is, by far, the biggest one the company has ever released.

The update addresses almost 200 security vulnerabilities across Windows systems, as well as supported software, dozens of which are labeled as critical, meaning they could cause serious damage to the users. Among the flaws are two vulnerabilities disclosed by Chaotic Eclipse , a mysterious researcher who conflicted with Microsoft recently over how vulnerabilities were reported, and researchers credited/compensated. Latest Videos From Watch full video here: Using AI to spot security issues By fixing almost 200 flaws, Microsoft essentially broke its own record - partly due to the use of Artificial Intelligence (AI).

The first major issue is GreenPlasma, an elevation-of-privilege vulnerability in the Windows Collaborative Translation Framework (CTF). This bug, tracked
as CVE-2026-45586, and given a severity score of 7.8/10 (high), allows a
local attacker to gain higher privileges on Windows systems. You may like Microsoft unveils MDASH, its AI agent-driven security platform Chaotic
Eclipse strikes again with another worrying Windows security flaw This worrying Microsoft BitLocker backdoor can grant full access to a locked drive
and all you need is a USB stick

The second is YellowKey, a Windows BitLocker Security Feature Bypass vulnerability tracked as CVE-2026-45585, and given a severity score of 6.8/10 (medium). The proof of concept (PoC) for this vulnerability has been made public, NVD said, which is in violation of coordinated vulnerability best practices.

As a result, Microsoft said it was considering legal action against Chaotic Eclipse if they had been found to be breaking the law. In its follow-up advisory to Patch Tuesday, the company did not credit any researchers for these two flaws, only saying that it recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features
and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Via Krebs on Security The best antivirus for all budgets Our top picks,
based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/microsoft-breaks-patch-tuesday-record-w ith-fixes-for-over-200-security-flaws


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)